From: Shivani Bhardwaj Date: Thu, 12 Dec 2024 10:09:00 +0000 (+0530) Subject: release: 7.0.8; update changelog X-Git-Tag: suricata-7.0.8^0 X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=97e69ffb1bc2b7358115ee59f460a924893664e8;p=thirdparty%2Fsuricata.git release: 7.0.8; update changelog --- diff --git a/ChangeLog b/ChangeLog index 01a8ac217a..bebd50ff4b 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,32 @@ +7.0.8 -- 2024-12-12 + +Security #7412: tcp: generic detection bypass using TCP urgent support (7.0.x backport)(HIGH - CVE 2024-55629) +Security #7405: dns: quadratic complexity in logging and invalid json as output (7.0.x backport)(HIGH - CVE 2024-55628) +Security #7404: tcp: segfault on StreamingBufferSlideToOffsetWithRegions (7.0.x backport)(CRITICAL - CVE 2024-55627) +Security #7367: bpf: oversized bpf file can lead to buffer overflow (7.0.x backport)(LOW - CVE 2024-55626) +Security #7306: detect: write to read-only memory in transforms (7.0.x backport)(CRITICAL - CVE 2024-55605) +Bug #7445: dpdk: RSS key length missmatch on ice (E810) card with DPDK version 22.11.6 (7.0.x backport) +Bug #7434: requires: rules with unmet requirements are still loaded (7.0.x backport) +Bug #7432: detect: decoder event rules fail to match on invalid packets (7.0.x backport) +Bug #7407: detect: missing app-layer metadata in alerts (7.0.x backport) +Bug #7368: flow: flow timeout pseudo packet triggers unexpected alert (7.0.x backport) +Bug #7362: rules: unknown internal events not being detected as errors (7.0.x backport) +Bug #7339: rust: different int types turn garbage on FFI boundary (7.0.x backport) +Bug #7335: asan/profiling: global-buffer-overflow error (7.0.x backport) +Bug #7327: http: FN with prefilter if the first of multi buffer did not match (7.0.x backport) +Bug #7324: mqtt: wrong and missing direction for keywords (7.0.x backport) +Bug #7310: http: incorrect file direction handling (7.0.x backport) +Bug #7308: conf: memleak if yaml parser is initialized before checking if file exists (7.0.x backport) +Bug #7307: detect: memleak in case of errors during initialization (7.0.x backport) +Bug #7301: output: oversized records lead to invalid json (7.0.x backport) +Bug #7295: detect: sip.stat_code keyword uses wrong buffer name +Bug #7294: conf: nullptr dereference if mem alloc fails for a node in yaml parser (7.0.x backport) +Optimization #7316: template: remove usage of template-rust (7.0.x backport) +Optimization #7275: tcp/reassemble: GetBlock takes O(nlgn) in worst case (7.0.x backport) +Feature #7439: eve/alert: enrich decoder event rules (7.0.x backport) +Task #7427: flowint: add isnotset support (7.0.x backport) +Task #7288: schema: add missing tls fields certificate and chain (7.0.x backport) + 7.0.7 -- 2024-10-01 Security #7289: http: missing hashtable random seed leads to potential DoS(CRITICAL - CVE 2024-47188) diff --git a/configure.ac b/configure.ac index 9326fe05b7..0b7ca961b6 100644 --- a/configure.ac +++ b/configure.ac @@ -1,4 +1,4 @@ - AC_INIT([suricata],[7.0.8-dev]) + AC_INIT([suricata],[7.0.8]) m4_ifndef([AM_SILENT_RULES], [m4_define([AM_SILENT_RULES],[])])AM_SILENT_RULES([yes]) AC_CONFIG_HEADERS([src/autoconf.h]) AC_CONFIG_SRCDIR([src/suricata.c]) diff --git a/requirements.txt b/requirements.txt index 6df1358f07..97d7ff80f9 100644 --- a/requirements.txt +++ b/requirements.txt @@ -3,5 +3,5 @@ # Format: # # name {repo} {branch|tag} -libhtp https://github.com/OISF/libhtp 0.5.x -suricata-update https://github.com/OISF/suricata-update master +libhtp https://github.com/OISF/libhtp 0.5.49 +suricata-update https://github.com/OISF/suricata-update 1.3.4